Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities

====================================================================== Secunia Research 27/12/2005 - IceWarp Web Mail Multiple File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

Cerberus Helpdesk 2.649 - display_ticket_thread.php?ticket SQL Injection

Cerberus Helpdesk 2.649 - displayticketthread.php?ticket SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input th...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

Jax Calendar 1.34 - jax_calendar.php SQL Injection

Jax Calendar 1.34 - jaxcalendar.php SQL Injection source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

MusicBox 2.3 - 'type' SQL Injection

source: https://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database...

MySQL MaxDB WebTools special character buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0684 BID: 13368 OSVDB: 15816 Background MaxDB is a SAP-certified open-source database developed by MySQL. The WebTools component offers a set of database tools which are accessible from a web browser. The wahttp program listens on port 9999 and processes HTTP...

Quantum Art QP7.Enterprise - news_and_events_new.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - newsandeventsnew.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...

Papoo 2.1.2 - 'index.php?menuid' SQL Injection

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...

Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection

source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...

Papoo 2.1.2 - 'print.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...

CVE-2005-4371

Vulnerability (CVE-2005-4371) : Acidcat 2.1.13 and earlier stores its database under the web root with insufficient access control. This allows remote attackers to access the file databases/acidcat.mdb and obtain sensitive information. The incident is documented with an exposure risk due to impro...

CVE-2005-4371

Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb...

Acidcat CMS 2.1.13 - acidcat.mdb Remote Information Disclosure

Acidcat CMS 2.1.13 - acidcat.mdb Remote Information Disclosure source: https://www.securityfocus.com/bid/15933/info Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. Successful exploitation could result...

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15966/info Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...

ContentServ 3.03.14.0 - index.php SQL Injection

ContentServ 3.03.14.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15956/info ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Community Enterprise 4.x - Multiple Input Validation Vulnerabilities

Community Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15963/info Community Enterprise is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Miraserver 1.0 RC4 - article.php?cat SQL Injection

Miraserver 1.0 RC4 - article.php?cat SQL Injection source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15961/info Baseline CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacke...

Acidcat CMS 2.1.13 - ID SQL Injection

Acidcat CMS 2.1.13 - ID SQL Injection source: https://www.securityfocus.com/bid/15933/info Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. Successful exploitation could result in a compromise of the...

Direct News 4.9 - index.php SQL Injection

Direct News 4.9 - index.php SQL Injection source: https://www.securityfocus.com/bid/15957/info Direct News is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...